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Abstract — Channel polarization is a phenomenon in which 
a particular recursive encoding induces a set of synthesized 
channels from many instances of a memoryless channel, such 
that a fraction of the synthesized channels becomes near perfect 
for data transmission and the other fraction becomes near useless 
for this task. Mahdavifar and Vardy have recently exploited 
this phenomenon to construct codes that achieve the symmetric 
private capacity for private data transmission over a degraded 
wiretap channel. In the current paper, we build on their work 
and demonstrate how to construct quantum wiretap polar codes 
that achieve the symmetric private capacity of a degraded 
quantum wiretap channel with a classical eavesdropper. Due to 
the Schumacher-Westmoreland correspondence between quan- 
tum privacy and quantum coherence, we can construct quantum 
polar codes by operating these quantum wiretap polar codes in 
superposition, much like Devetak's technique for demonstrating 
the achievability of the coherent information rate for quantum 
data transmission. Our scheme achieves the symmetric coherent 
information rate for quantum channels that are degradable with 
a classical environment. This condition on the environment may 
seem restrictive, but we show that many quantum channels satisfy 
this criterion, including amplitude damping channels, photon- 
detected jump channels, dephasing channels, erasure channels, 
and cloning channels. Our quantum polar coding scheme has 
the desirable properties of being channel-adapted and symmetric 
capacity-achieving along with having an efficient encoder, but 
we have not demonstrated that the decoding is efficient. Also, 
the scheme may require entanglement assistance, but we show 
that the rate of entanglement consumption vanishes in the limit 
of large blocklength if the channel is degradable with classical 
environment. 



I. Introduction 

In a seminal paper on quantum error correction, Shor set 
out the "goal of [defining] the quantum analog of the Shannon 
capacity |40| for a quantum channel, and [finding] encoding 
schemes which approach this capacity" BTI . At the time, 
it was not really clear how to define the quantum capacity 
of a quantum channel, but Shor's quantum error correction 
code BTIl gave some clues for constructing more general 
encoding schemes. Subsequently, several authors contributed 
increasingly sophisticated quantum error correction codes IJOl . 
Il45l . ifTSl and others established a good definition of and 
upper bounds on the quantum capacity of a channel ll36l . 
||37l . 141, |5|, culminating in some high-performing quantum 
error-correction codes lISTl . Il30l . Il34l . Il26ll and random-coding 
based schemes for achieving the coherent information rate ll37l 
of a quantum channel ll29ll . Il42l . ifTTI . For some channels 
known as degradable quantum channels lfT2ll . in which the 
channel to the environment is noisier than the channel to 
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the intended receiver, the random-coding based schemes from 
Refs. ||29l . B2I . ifTTl achieve their quantum capacity, due to 
the particular structure of these channels. 

In spite of the astounding progress in both quantum error 
correction lfT3]| and quantum Shannon theory [47 J . none of 
the high performance codes constructed to date are provably 
capacity achieving, and none of the aforementioned schemes 
that achieve the capacity are explicit (the proofs instead exploit 
randomness to establish the existence of a code). Among 
the schemes that achieve the quantum capacity, perhaps De- 
vetak's [11] provides the most clear recipe to a quantum 
code designer interested in constructing a capacity-achieving 
quantum code. His proof takes a cue from a certain security 
proof of quantum key distribution [43 1 and the Schumacher- 
Westmoreland correspondence between quantum privacy and 
quantum coherence |38|, by first establishing the existence of 
codes that achieve the private capacity of a quantum wiretap 
channel and then demonstrating how to operate such a code 
in superposition so that it achieves the quantum capacity. It is 
also clear that the structure of his codes bears some similarities 
with Calderbank-Shor-Steane codes ||T0|, ||45| . 

Along with the above developments, there have been im- 
pressive breakthroughs in classical coding theory and informa- 
tion theory 1141 . one of which is Arikan's recent work on polar 
codes |l2). Arikan's polar codes exploit a phenomenon known 
as channel polarization, in which a particular recursive encod- 
ing induces a set of synthesized channels from the original 
memoryless noisy channels. The synthesized channels are such 
that a fraction of them are perfect for data transmission, while 
the other fraction are completely useless, and the fraction that 
are perfect is equal to the symmetric capacity of the original 
channel. The codes are channel adapted, in the sense that 
Arikan's "polar coding rule" establishes through which of the 
synthesized channels the sender should transmit data, and this 
polar coding rule depends on the particular channel being used. 
The codes are near explicit and have the desirable property that 
both the encoding and decoding are efficient (the complexity 
of each is O {N log N) where N is the blocklength of the 
code). 

Arikan's work might make us wonder whether it would be 
possible to construct polar codes for transmitting quantum 
data over general quantum channels, and the development 
in the classical world most relevant for this task is due to 
Madhavifar and Vardy ||32]| . There, they established that a 
modification of Arikan's original polar coding scheme can 
achieve the symmetric private capacity of a degraded classical 
wiretap channel. (In order to make this statement, the sender 
and receiver actually require access to a small amount of secret 
key, but the rate of secret key needed vanishes when the code's 
blocklength becomes large.) Thus, with the Madhavifar- Vardy 
scheme for polar coding over classical degraded wiretap chan- 
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nels II32I . the Devetak scheme for operating a quantum wiretap 
code in superposition [TT |, and our recent work on polar codes 
for transmitting classical data over quantum channels [48], it 
should be evident that one could put these pieces together in 
order to construct polar codes for transmitting quantum data 
over degradable quantum channels. 

In this paper, we pursue this direction by constructing polar 
codes that achieve a symmetric capacity for transmitting quan- 
tum data over particular degradable quantum channels. These 
channels should satisfy the property that encoding classical 
data in some orthonormal basis at their input leads to com- 
muting states for the environment (essentially, the environment 
becomes classical), and we clarify later why this is important 
in our construction. Many degradable channels fall into this 
class, including amplitude damping channels |16|, photon- 
detected jump channels H], erasure channels 1191 . dephasing 
channels ifTTI . and cloning channels l|6l (channels induced by 
universal cloning machines ifTTl . 19]). These noisy channels 
occur naturally in physical processes, with amplitude damping 
modeling photon loss or spontaneous emission, the photon- 
detected jump channel modeling the spontaneous decay of 
atoms with a detected photon emission the erasure channel 
being a different model for photon loss fTS), the dephasing 
channel modeling random phase noise in superconducting 
systems [7], and the cloning channel modeling stimulated 
emission from an atom |f 33l , ll44l . ESl . Our codes are sym- 
metric capacity achieving for all of the above channels, and 
this follows from analyzing a quantum polar coding rule for 
these channels. 

We summarize briefly how the construction works. First, 
we consider a quantum wiretap channel with one classical 
input and two quantum outputs, one for the legitimate receiver 
(Bob) and the other for the wiretapper (Eve). We demonstrate 
that these channels polarize in four different ways, based on 
whether the channels are good or bad for the receiver or the 
wiretapper. In order to have strong security, we must guarantee 
that the bad channels for the wiretapper are in fact "really 
bad" in a precise sense, and it is for this reason that we 
consider channels with classical environment. (Interestingly, 
we know of quantum channels where it is not clear to us 
how to ensure that they become "really bad," and we prove 
some results in this direction in Appendix |A]) The resulting 
coding scheme is to send the information bits through the 
channels which are good for Bob and bad for Eve, "frozen" 
bits through the channels that are bad for both, half of a secret 
key through channels which are bad for Bob but good for Eve, 
and randomized bits through the channels good for both. By an 
analysis similar to that of Madhavifar and Vardy [32^, we can 
demonstrate that this scheme achieves the symmetric private 
capacity of a degraded quantum wiretap channel with classical 
environment, while the rate of secret key required vanishes in 
the limit of large blocklength. 

The main idea for constructing quantum polar codes for 
degradable quantum channels with classical environment is 
just to operate the quantum wiretap code in superposition and 
exploit Arikan's encoding with CNOT gates with respect to 
some orthonormal basis. This amounts to sending information 
qubits through the channels good for the receiver Bob and 



bad for the environment Eve, frozen ancilla qubits through 
the channels that are bad for both, half of shared entangle- 
ment through the channels that are bad for Bob but good 
for Eve, and superposed ancilla qubits in the state |+) = 
(|0) + /\/2 through the channels that are good for both. 
The resulting quantum polar codes are entanglement-assisted 
ID, but we can prove that the entanglement consumption rate 
required vanishes in the limit of large blocklength (in this 
regard, the codes here are similar to Hsieh et al.'s recent 
ones II25I ). Operating the quantum successive cancellation 
decoder from Ref. |48| in a coherent fashion, followed by 
controlled "decoupling unitaries" allows us to exploit the 
properties of the quantum wiretap polar code in order to 
prove that the above quantum polar code performs well (we 
note that this decoder is similar to Devetak's IJJJ). The 
resulting quantum polar codes achieve the symmetric quantum 
capacity of degradable channels with classical environment 
with an encoding circuit that has complexity O (NlogN). The 
decoding unfortunately remains inefficient, but further efforts 
may lead to an efficient realization of a decoder 

Recently, Renes et al. have independently constructed quan- 
tum polar codes that have both an efficient encoding and 
decoding, though they achieve the coherent information rate 
only for Pauli channels |[35l . We should clarify the ways 
in which their scheme is different from ours. First, they 
restrict their construction to Pauli channels because they 
are considering the effective classical channels induced in 
the amplitude (Pauli-Z) and phase (Pauli-X) bases (not all 
channels, including some of the ones mentioned above, induce 
classical channels in complementary bases). As a result, they 
can directly import Arikan's ideas because they are dealing 
with classical channels in complementary bases. An additional 
bonus is that they obtain an efficient decoder as well as an 
efficient encoder, essentially because their decoder is Arikan's 
successive cancellation decoder implemented as an efficient 
unitary operation. Their codes require the assistance of shared 
entanglement, but there are some channels for which they can 
prove that it is not required. 

Our scheme is different from theirs in several ways. First, 
we have a quantum polar coding rule that is adapted to a given 
quantum channel. In particular, the rule used for determining 
the good or bad channels is based on a quantum parameter 
(fidelity). Also, we demonstrate polarization in terms of two 
quantum parameters, the fidelity and the Holevo information, 
by building on our earlier results in Ref. p8l . It is for this 
reason that our scheme is symmetric capacity-achieving for 
a wide variety of quantum channels. Also, the first part of 
our decoder is a coherent version of the quantum successive 
cancellation decoder from Ref. ||481 . rather than one that is 
based directly on the classical decoder. Since we have not 
proven that the quantum successive cancellation decoder from 
Ref. [48| has an efficient implementation, the coherent version 
of it in this work is certainly not efficient. In spite of the 
inefficiency of the quantum successive cancellation decoder, 
this decoder is needed in order to achieve the symmetric 
quantum capacity of the channels considered here. Finally, 
all the channels we consider here only require a vanishing 
rate of entanglement assistance, due to an argument similar to 
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Proposition 22 of Madhavifar and Vardy fST] and the fact that 
they are degradable with a classical environment. 

We structure this paper as follows. Section [11] reviews our 
work from Ref. Il48l on polar codes for classical-quantum 



channels. We present in Section III our scheme for private 
communication over quantum wiretap channels that are de- 
graded with a classical environment. Finally, we demonstrate 
how to construct quantum polar codes from quantum wiretap 
polar codes in Section |IV] The last section concludes with a 
summary and some open questions. 

II. Review of polar codes for classical-quantum 

CHANNELS 

We begin by providing a brief review of polar codes 
constructed for classical-quantum channels |48|. There, we 
considered channels with binary classical inputs and quantum 
outputs of the form: 

W : Px, 

where W denotes the channel, x G {0, 1}, and px is a den- 
sity operator The relevant parameters that determine channel 

II 1 1 2 

performance are the fidelity F (W) = k/Pov^ i '■^^ 



symmetric Holevo information / (W) = H {p) — l/2{H (/Oo) + 
H [pi)) with p =1/2 {po + pi) and the von Neumann entropy 
H (a) = — Tr{(T logj cr}. Channels with F (W) < e are nearly 
noiseless and those with F (W) > 1 — e are near to being 
completely useless. The fidelity generalizes the Bhattacharya 
distance Z [|2l in the sense that ^/F (W) = Z [W) \i the two 
states Po and pi commute (i.e., if the channel is classical). 

In coding classical information for the above channel, we 
consider N = 2^ copies of W, such that the resulting channel 
is of the form 



X^ =Xi---XN Pxi^ = Pxi S 

where is the length N input and 



PxN is the output 
state. We can extend Arikan's idea of channel combining to 
this classical-quantum channel, by considering the channels 
induced by a transformation on an input bit (row) vector u^: 



where Gn = BnF'^ 
that reverses the order of the bits and 

1 0' 



with being a permutation matrix 



F = 



1 1 



This classical encoding is equivalent to a network of classical 
CNOT gates and permutation operations that can be imple- 
mented with complexity O (NlogN) (see Figures 1 and 2 of 
Ref. EU or Figures 1, 2, and 3 of Ref. ID). We can also 
define the split channels from the above combined channels 
as 



W, 



(0 



N 



where 



P{i),Ui 



E 



1 

2^-1 
1 

2^ 



B 

'Pu«Gn- 



(1) 



(2) 



(3) 



The interpretation of this channel is that it is the one "seen" by 
the bit Ui if all of the previous bits u]^^ are available and if we 
consider all the future bits uf^j^ as randomized. This motivates 
the development of a quantum successive cancellation decoder 
||48l that attempts to distinguish Ui = from = 1 by 
adaptively exploiting the results of previous measurements 
and Helstrom-Holevo measurements ||231 . Il24l for each bit 
decision. 

Arikan's polar coding rule is to divide the channels into 
"good" ones and "bad" ones. Let [N] = {!,..., N} and /3 be 
a real such that < /3 < 1/2. The polar coding rule divides 
the channels as follows: 



gM{W,f3) = {ie[N]■.^JFiwj^^)<2 



BM{W,(3) = {ze[N]:\/Fiwj^^)>2 



(4) 



(5) 



so that the channels in t/jv {W, /3) are the good ones and those 
in Bn {W, P) are the bad ones. Observe that the quantum polar 
coding rule involves the quantum channel parameter F, rather 
than a classical one such as the Bhattacharya distance. 

The following theorem is helpful in determining what 
fraction of the channels become good or bad |3|: 

Theorem 1 (Convergence Rate): Let {X„ : n > 0} be a 
random process with < X„ < 1 and satisfying 



Xn+l < qXn w.p. 1/2, 
X„+,=Xl w.p. 1/2, 



(6) 
(7) 



where q is some positive constant. Let 
exist almost surely with PrjXoo = 0} = Poo- Then for any 
/3 < 1/2, 

lim Pr|x„ < 2-2"'| =Po„ 
and for any ^ > 1/2, 



lim Pr i X„ > 2- 

n—^oo 



= 0. 



One can then consider the channel combining and splitting 
mentioned above as a random birth process in which a channel 
Wn+i is constructed from two copies of a previous one Wn 
according to the rules in Section 4 of Ref f48l. One can then 
consider the process {F„ : n > 0} = {Wn) : n > o| 

and prove that it is a bounded super-martingale by exploiting 
the relationships given in Proposition 10 of Ref. |48 1. From the 
convergence properties of martingales, one can then conclude 
that Fao converges almost surely to a value in {0, 1}, and 
the probability that it equals zero is equal to the symmetric 
Holevo information / {W). Furthermore, since the process F„ 
satisfies the relations in (|6]|7]), the following proposition on the 
convergence rate of polarization holds: 

Theorem 2: Given a binary input classical-quantum channel 
W and any /3 < 1/2, 



lim Pr |f„ < 2- 



One of the important advances in Ref. |48| was to establish 
that a quantum successive cancellation decoder performs well 
for polar coding over classical-quantum channels. In this 



4 




case, the decoder is some positive operator-valued measure 
(POVM) {A„^} that attempts to decode the information bits 
rehably. In particular, we showed the following bound on 
the performance of such a decoder (by exploiting Sen's "non- 
commutative union bound" ^9]): 

Fr{UA ^Ua}<2 

under the assumption that the sender chooses the information 
bits Ua according to a uniform distribution. Thus, by choosing 
the channels over which the sender transmits the information 
bits to be in Qn {W, (3) and those over which she transmits 
agreed upon frozen bits to be in Bm {W^P), we obtain the 
following bound on the probability of decoding error: 

Pr{[/^^C/^} = o(2-5~'). 

This completes the specification of a polar code for classical- 
quantum channels. 

We end this section by stating a lemma that will prove useful 
for us: 

Lemma 3: Let W and W* both be binary-input classical- 
quantum channels, such that W* is a degraded version of W, 
in the sense that 

W* (x) ^V{W{x)), 

where x is the classical input to the channels and V is 
some degrading quantum channel from W to W*. Let wj-^'' 



M^f' and W*^^'\ 



W^^'^ denote the corresponding 
synthesized channels from channel combining and splitting. 
Then W^'*'' is degraded with respect to W^^^ for all i £ [N] 
and furthermore, we have that /(W^*^) > HW^^"^) and 

Proof: This lemma follows straightforwardly from the 
definition in ([T]), and the fact that quantum mutual information 
and fidelity are monotone under quantum processing with the 
degrading map V 1471 . ■ 
We can then observe from the above lemma and (|4]) that 
if W* is degraded with respect to W, the good channels for 
W* are a subset of those that are good for W: Gn {W* , (5) C 
Gn {W, /3). Similarly, the following relationship holds as well: 
Bn iW,P)CBN iW*,l3). 

III. Quantum wiretap polar codes 

We now discuss how to construct polar codes that achieve 
the symmetric private information rate for a quantum wiretap 
channel. The results in this section build upon those of 
Mahdavifai- and Vardy in Ref. Il32l . 

The model for a binary-input quantum wiretap channel is 
as follows: 

X ^ ^, 

where x S {0, 1} and is a density operator on a tensor 
product Hilbert space BE. The legitimate receiver Bob has 
access to the system B and the eavesdropper Eve has access 
to the system E. Thus, Bob's density operator is 



N 



and Eve's density operator is 

The quantum wiretap channel is degraded if there exists some 
quantum channel V such that the following condition holds 
for all x: 

p^ = V (pf ) . 



Let W denote the channel to Bob: 

W:x^p^, 
and let W* denote the channel to Eve: 



W* 



Px 



(8) 



(9) 



In order to make a statement about the strong security of 
a quantum wiretap polar code, we need to ensure that the 
channels over which the sender is transmitting information 
bits to Bob should be "really bad" for Eve. That is, it is not 
sufficient for the channels to satisfy (|5]l, but they should be 
divided as to whether they are poor for Eve according to the 
following stronger criterion: 



V{W\P) = Ue[N] : ^F{W*j}^) > 1-2 



Dividing the channels for Eve in this way makes it nearly 
impossible for her to determine whether the sender transmits 
a zero or one through these channels in the limit where N 
becomes large. In what follows, we say that the channels in 
V{W\I3) are "bad" for Eve while those in ViW^P) = 
[N] \ V {W*,I3) ai-e "good" for Eve. 
It is again important for us to know what fraction of the 



channels W, 



N 



become bad for Eve in order to establish 
that the quantum wiretap polar codes are symmetric capacity- 
achieving — i.e., it would be good to have another theorem 
similar to Theorem |2] for this case. In order to have such 
a theorem, we would require a birth process that obeys the 
properties in (|6]|7|. Fortunately, in the case that and pf 
commute, we have the following proposition: 

Proposition 4: Suppose that the states p^ and pf for the 
binary-input classical-quantum channel W* commute. Then 
for any /3 < 1/2, 



lim Pr ■ 

n— ^oo 



Fl > 1 



1-I{W* 



where F* is the process {F*:n>0} = {^/F{W*) : n > 0}. 

Proof: The proof proceeds along similar lines as Theo- 
rem 3.15 in Ref. fTl]. Since the states Pq and pf commute, 
they are effectively classical, and the fidelities in F* reduce 
to the classical Bhattacharya parameters. It is then possible to 
show that this process satisfies 



F*+,>F,:J2-{F*r w.p. 1/2, 



F, 



n+l 



{F:f 



w.p. 1/2. 



(10) 
(11) 



Tr^K^}, 



The first relation follows from Lemma 3.16 in Ref. EtI . and 
the second follows from Lemma 2.16 in Ref. EtI . We can 
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then rewrite the above conditions as follows: 

2 



<(i-(F,:rj w.p. 1/2, (12) 
1 - (K+iT = 1 - (Kf < 2 (1 - iF:f) w.p. 1/2. 

(13) 

Defining X„ by X„ = 1 — {F,*}'^, it is now clear the process 
X„ satisfies the conditions in (|6]|7]i. Since we know that F,* 
converges almost surely to a random variable taking values 
in {0, 1} with Pr{F^ = 1} = 1 - I (W*), it follows that 
Xn converges almost surely to Xrx, with Pr {Xr^, = 0} = 
1 — / (W*). The process X„ then satisfies all the requirements 
needed to apply Theorem [T] so that 

lim Pr \Xn < 2-2"^ 1 = 1-/(1^*), 

which in turn, from the relation Xn = 1 — (F*)'^ > 1 — F*, 
implies that 

lim Prjl -F* < 2-^"' \ = I - I (W*) , 

giving the statement of the proposition. ■ 
It is worthwhile to discuss why we specialized the above 
proposition to the case where the states Pq and pf are 
commuting. First, as we demonstrate in Appendix [B] there 
are many examples of natural quantum channels for which 
this condition holds, including amplitude damping channels, 
photon-detected jump channels, dephasing channels, erasure 
channels, and cloning channels. Thus, the quantum wiretap 
polar coding scheme in this section and the quantum polar 
coding scheme in the next section works well for these 
channels. On the other hand, there exist quantum wiretap 



channels for which the critical inequality in (10 1 does not 
hold. For example. Appendix [Ajdemonstrates a violation of the 
inequality whenever the states Pq and pf are pure and such 
that Trjp^pf } ^ {0, 1}. So the scheme given in this section 
does not necessarily achieve the symmetric private capacity 
for such channels because it is not clear how to guarantee that 
the fraction of bad channels for Eve is equal to 1 — / (W*). 

We can now establish our scheme for a quantum wiretap 
polar code. We divide the set [N] into four different subsets: 

A = v{w*,i3)ngN 

B = r{W*,l3)nBN{W,f3), 

X = r'{w*,i3)nBN {w,p), 
y = v^{w*,i3)ngN {w,i3). 

Observe that A, B, X, and 3^ form a partition of [N] because 
they are all pairwise disjoint and ylUSUA'Uj^ ~ [N] . Thus, 
the set A consists of channels that are good for Bob and bad 
for Eve, B has the channels that are bad for both, X has the 
channels that are good for Eve and bad for Bob, and y has 
the channels that are good for Eve and good for Bob. The 
Mahdavifar-Vardy coding scheme is then straightforward: 

1) Send the information bits through the channels in A. 

2) Send the frozen bit vector uq through the channels in 
B. 

3) Send randomized bits through the channels in y. 



4) We suppose that Alice and Bob have access to a secret 
key before communication begins. Alice inputs her half 
of the secret key into the channels in A" PI Mahdavifar 
and Vardy demonstrated that the fraction jA"! /iV tends 
to zero in the limit N ^ oo f32l, and a slight mod- 
ification of their argument demonstrates that the codes 
constructed here have the same property. This implies 
that the rate of secret key needed to ensure reliability 
and strong security for this coding scheme vanishes and 
is thus negligible in the asymptotic limit (we require the 
strong security criterion for when we produce quantum 
polar codes from quantum wiretap polar codes). 
The following theorem guarantees that the rate of the 

quantum wiretap polar code is equal to the symmetric private 

information: 

Theorem 5: For the quantum wiretap polar coding scheme 
given above, a degraded quantum wiretap channel with W and 
W* as defined in (8]|9i, with W* having a classical output, 
and for sufficiently large N, its rate Rjq — \A\ /N converges 
to the symmetric private information: 

lim Rn ^I{W)-I{W*). 

Proof: We just need to determine the size of the set A. 
From basic set theory, we know that 



\v{w*,p)\ , \Gn(W,P)\ 



N 
1 

' TV 



N 

\v{w*,p)yjgN {w,p)\. 



Consider that 



V {w* ,/3)ugN {w, 13) = [N] \ {V {w* ,p)ugN {W, I3)f 

^[N]\{V^{W*,f3)nBM{W,P)) 
= [N]\X 

So it follows that 

1^1 _ \v{w\p)\ , \gN[w,(3)\ 1 



N 



N 



N 



N 



\[N]\X\ 



\v{w\p)\ \gN{w,p)\ \x\ 

N N N 



In the limit as N becomes large, we know from Proposition [4] 
that 

lim 



and from Theorem |2] that 

AT-S-oo A'' 



lim 



This is a slight variation of the Mahdavifar-Vardy coding scheme that 
ensures both reliability and strong security. Mahdavifar and Vardy were 
inconclusive about the reliability of their coding scheme because they were 
unable to make any statements about the reliability of the channels in X. 
This minor variation with the addition of a secret key ensures security and 
reliability because a secret key is a hybrid of a frozen bit and a randomized 
bit. It is similar to a frozen bit in that its value is available to Bob and thus he 
does not need to decode the bit channels with secret key input. It is similar to 
a randomized bit from the assumption that its value is uniform and unknown 
to Eve. 
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Finally, we later show that limjv_j.oo \X\ /N = 0. The state- 
ment of the theorem then follows. ■ 

The following theorem demonstrates that the quantum wire- 
tap polar coding scheme has strong security: 

Theorem 6: For the quantum wiretap polar coding scheme 
given above, a degraded quantum wiretap channel with W and 
W* as defined in (8]|9i, with W* having a classical output, 
and for sufficiently large N, it satisfies the following strong 
security criterion: 



If/. 



Proof: Consider that 

I{Ux,E^) = Y,l(u,;E 
ieA 

= Y,I{U,;E-U_^- 

ieA 



ieA 

The first equality is from the chain rule for quantum mutual 
information and by defining to be the indices in A 
preceding i. The second equality follows from the assumption 
that the bits in U^- are chosen uniformly at random. The 
firts inequality is from quantum data processing. The third 
equality is from the definition of the synthesized channels 
W^^\ Continuing, we have 



ieA 



N 



ieA 



The first inequality is from Proposition 1 in Ref. BSl . The 
final inequality follows from the definition of the set A. ■ 

We also know that the code has good reliability, in the sense 
that there exists a POVM |Al'^'^ly| such that 



MUAuy ^ UAuy} < 2 




This POVM is the quantum successive cancellation decoder 
established in Ref. 1,48 J . The quantum successive cancellation 
decoder operates exactly as before, but it needs to decode both 
the information bits in A and the randomized bits in y. It also 
exploits the frozen bits in B and the secret key bits in X to 
help with decoding. 

Finally, we can prove that the rate of secret key bits required 
by the scheme vanishes in the limit as N becomes large: 

Proposition 7: For the quantum wiretap polar coding 
scheme given above, a degraded quantum wiretap channel with 



W and W* as defined in (8]|9i, with W* having a classical 
output, the rate \X\ /N vanishes as N becomes large: 

lim ^ = 0. 

Proof: This result follows by an argument similar to 
that for Proposition 22 in Ref. ^2], but we need to mod- 
ify it slightly. We prove that the sets X, ^Jat (M^*, and 
Vn {W* , (3) are pairwise disjoint (note that we define the set 
Gn {W*,I3) as in but with respect to the channel W*). It 
then follows that 

\x\ \gN{w*,p)\ , \VNiw*,p)\ 

N 



< 1. 



A. ' N - ^''^ 

So we prove that these sets are disjoint. First, consider that 
X and Vn {W* , /3) are disjoint by definition because X is 
formed from an intersection with Vff {W*,/3). Next, observe 
that for sufficiently large N, Vn (W* , f3) and Gn {W* , I3) are 
disjoint by definition. Observe that X and GN{W*,f3) are 
disjoint because 

Bn {W,P)CBn{W*,I3), 

which follows from W* being a degraded version of W* 
and Lemma [3] (also, BNiW*,f3) is the complement of 
Gn iW*,l3)). By applying Proposition |4] we know that 

and from Theorem |2] we know that 

\Gn{W*,/3)\ 



lim 

N^oo 



N 



I{W*) . 



Thus, the statement of the proposition follows from (14i and 
the above asymptotic limits. ■ 

IV. Quantum polar codes 

From such a scheme for private classical communication 
over a quantum wiretap channel with classical environment, 
we can readily construct a quantum polar code achieving 
the coherent information of a degradable quantum channel 
by exploiting Devetak's ideas for quantum coding [ 1 1 1 and 
the recent quantum successive cancellation decoder from 
Ref. Il48l . First, recall that a quantum channel W is specified 
by a completely-positive trace-preserving map (we consider 
quantum channels with qubit inputs in this work). Any such 
map has a dilation to a larger system in which the dynamics 
over a tensor product space are unitary, i.e., it holds that 



»'W = Trs{f;i;:-'"=p(c/^:-'"= 



where U^^^^ is the isometric extension of the channel 
W. The complementary channel W* is the map obtained by 
tracing over Bob's system 

Such a realization makes the quantum coding setting anal- 
ogous to the quantum wiretap setting. We also define the 
symmetric coherent information of the channel as 

I, (W) = H{B)-H {AB) , 
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where the entropies resuh from sending half of a maximally 
entangled Bell state through the input of the channel. It is 
straightforward to verify that 

IeiW)=I{W)~IiW*). 

Our strategy for achieving the coherent information is to 
operate the quantum wiretap polar code in superposition (just 
as Devetak does |11|). 

We can similarly specify a quantum polar code by the pa- 
rameter vector {N, K, A, B, X, y, ug) where these parameters 
are all the same as in the quantum wiretap polar code. The 
encoder is a coherent version of Arikan's encoder where we 
replace classical CNOT gates with quantum CNOT gates that 
act as follows on a two-qubit state: 



/ ^ ^x,y I 



ax.,y \x) \x ® y) 



(15) 



It is important to choose the orthonormal basis for the CNOT 
to be the one such that the induced states for the environment 
commute. That is, consider the following induced classical- 
quantum channel for the environment Eve: 

x^W*{\x) (xl)^pf, 



where the basis {\x)} is the same as in (15 1. The scheme 
in this section works at the claimed rates if and pf 
commute (so that we can exploit the result in Proposition |4|. 
We prove in Appendix [B| that many important channels satisfy 
this criterion. 

We can now state our quantum polar coding theorem: 
Theorem 8 (Quantum Polar Coding): For any degradable 
qubit-input quantum channel W with classical environment, 
there exists a quantum polar coding scheme for entanglement 
generation that achieves the symmetric coherent information, 
in the sense that the fidelity between the input entanglement 
and the generated entanglement is equal to 1 — o ^2^i^'*^ 
where N is the blocklength of the code and /3 is some real 
such that < /3 < 1/2. The scheme may require entanglement 
assistance, but the entanglement consumption rate vanishes in 
the limit of large blocklength. 

Proof: We assume that our task is merely to generate 
entanglement between Alice and Bob[^ Alice begins by prepar- 
ing Bell states locally on her side of the channel. Also, we 
assume that Alice and Bob share a small number of ebits 
before communication begins. We have the following structure 
for our code: 

1) Alice sends half of the locally prepared Bell states 
through the channels in A. 

Alice sends the frozen ancilla qubits \ub) through the 
channels in B. 

Alice sends |+) = (|0) + |1)) /\/2 states through the 
channels in y. 

4) Alice sends her shares of the ebits through the channels 
in X. 



^The task of entanglement generation is equivalent to tlie task of quantum 
communication if forward classical communication from sender to receiver 
is available. Furthermore, forward classical communication does not increase 
the capacity of a quantum channel (4), 1471 . 



2) 
3) 



Thus, the state before it is input to the encoder is as follows: 



1 



1 



\uy) 



Ux 



\ux) \ux) 



\ua) \ua). 



where Alice possesses both shares of - , , , , , 
Alice possesses and the superposed state 

^ 1^3^)' and Alice and Bob share the entangled state 



/2\y\ ^Uy 

^ ■ Tliux \ux)- We can also write the above state as 



1 



^/2R^+mw^ ^ 



ua) \ua) \ub) \uy) \ux) \ux) , 



and we furthermore require Alice to apply some gates that 
realize some relative phases 7„y so that the above state 
becomes 
1 



E 



\ua) \ua) \ub) \uy) \ux) \ux) ■ 



(It is possible to realize these phases with only linear overhead 
in the encoding. Also, we specify how to choose these phases 
later.) Alice then applies a coherent version of Arikan's CNOT 
encoder |2|, leading to the following encoded state: 



where {{(f'u^)}^^ are the entanglement-assisted quantum 
codewords, given by 

1 ^ 5'^"^|l^„, 



u 



1 



E 

Uy.Ux 

E ' 

Uy.Ux 



'lJ^,UB,Uy .Ux I 



\ux 



\ua) \ub) \uy) \ux) \ux) , 



with the coherent Arikan CNOT encoder U acting only on 
Alice's registers. Observe that the above state is encoded 
in a Calderbank-Shor-Steane code ifTOl , ||45] (modulo the 
relative phases) because the inputs are either information 
qubits, ancillas in a fixed state |0) or |1), ancillas in a state 
|+), or shares of ebits, and furthermore, the encoder consists of 
just SWAP gates and CNOT gates. Alice transmits the register 
containing the states | (p^^ ) over the quantum channel, leading 
to the following state 

^T^^El^-^)!-^-- 



where 



10. 



Bob then applies the following coherent quantum successive 
cancellation decoder to his systems and his half of the 
entanglement B'^: 



E ^^^^^ly ®\ux){ux\®\uA,uyy . (16) 

Ujs^,Uy,Ux 

The POVM elements [kuAly] 

are the same as 

L ' J •U,J^,lly,Ux 

those in the incoherent quantum successive cancellation de- 
coder from Ref. ||48l. Placing them in the above operation 
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allows this first part of the decoder to be an isometry and 
for the code to thus operate in superposition. We claim that 
the following state has fidelity 1 — o ^2^3^'^^ with the state 
after Bob applies the above coherent quantum successive 
cancellation decoder: 



where the last inequality follows from the performance of the 
corresponding quantum wiretap polar code. Thus, there must 



exist some phases (5^ and 7„ such that the state in ( 17 i has 



1 



Uj^,UQ ,Uy I 



B'^ E" 



\ux)\uA,Uy) , (17) 



where we specify the phases e^^^y later. Indeed, consider the 
following states 



1 



\Xuy) 



E 



\UA) 



\ux) \uA,Uy) 



, B" E" 



B 



Their overlap is as follows: 
1 



{^Uy\Xuy) = 



21-41+1-^1 



E 



B" E" 



2\A\ + \X\ E 

,11^ ,M A- 

-b" 



{ua\ua) 



,B"E" 



{ux\ux) {uWu\) {uy\u'y) 



1 



21-41+1^1 



^ ^ {''l'ujs^,Ui3.Uy,Ux\\J^nj^,Ly \'^UJS,.UB.Uy,Ux) 

u^.ux 



a large overlap with the state resulting from the action of the 
coherent quantum successive cancellation decoder in ( [T6] l (this 
follows from Lemma 4 of Ref. 1 1 1 1). The state resulting from 
the coherent quantum successive cancellation decoder is then 
close to the state in ( [T7| , which we repeat below: 

1 



^/2lA\+\y\+\x\ 51 



, B" E'^ 



J^,lLB,Uy ,Ux I 



Wx) \uA,Uy) 

For a particular value of ua, the above state is 



1 



,B" E'' 



Uj^.Un-Uy ,Ux I 



Uy^Ux 



\ux) \uA,Uy) 

Tracing over Bob's systems gives the following state 



1 



2\x\+\y\ ^ 

Ux ,Uy 



A,^B,'^y-Mx ■ 



We know from the quantum wiretap polar code that the 
following property holds 



o[2-'^^' 



HUa^E"^' 

Thus, from the fact that relative entropy upper bounds the trace 
distance (Theorem 11.9.2 of Ref. Il47i ). we know that 



2\n2^ I {Ua;E-^) > 



2\A\ W'^^A 

UA 



where 



E" _ 



E" 

2\A\ ^^A 

^A 



Thus, it follows that 

— vL^" 

2\A\ II 

%IA 

and from the relationship between trace distance and fi- 
delity ll47l . we have that 

- \ h'liir 

U.A 



21-41 ^ 

UA 

So, for each ua, consider that Bob possesses the purification 



> 



21-41 



]^ jr f \{'^x)b" I B^ \ of the state ip!^ or V'^ and by Uhlmann's theorem 

+1-1^1 1 n^-.uy Vu^,UB,uy,uxJ- Ea, there exist isometries (7„^ such that 



UA-UX 

We can then consider the average overlap: 



|3;| E i'fiii-ylXuy) 



'-I-A 

for all Ua, where we observe that i/; " 



IS a purmcation of 



213^1 



Uy 



> I V TrlA("-)^"V'''" \ 

— 2\^\ + \'^\ + \y\ ^ '^'^ Y^UA,Uy VuA^Ue^UyMx ^ 



UA.UXtUy 



> 1 - O 2^5 



, defined as 

\Vua) 

^ V2l^l+l'^l 

Uy.Ux 



UA 5^23 ^Uy 



,Ux) 



B"E" 



\ux) \uy)^^ 
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Thus, Bob's final task is to apply the controlled unitary on his 
state 

\ua) {ua^ «) Uu^, 

leading to the following state 

1 



Y \ua) \ua)^ Y1 



Uy ^Upc 



The desired, ideal state is as follows: 



\ux) \uy) 



\Ua) 



and, after a straightforward calculation, the overlap between 
the actual state and the desired state is equal to 



21-41 



21-41 



l-o(2-i^' 



Bob's final move is to discard his register in , leading to 
a state close to the following entangled state shared between 
Alice and Bob: 



1 



Y\ua) \uaY 



Putting everything together, we have a scheme that generates 
entanglement with a fidelity equal to 



1 



where the error results from two parts in the protocol: the first 
error is from the reliability of the quantum wiretap polar code 
and the second is from the strong security of the quantum 
wiretap polar code. ■ 
The above scheme achieves the symmetric coherent infor- 
mation rate and has an efficient encoder, but it is unclear to 
us right now how to improve the efficiency of the two-step 
decoder. If one were able to improve the efficiency of the 
quantum successive cancellation decoder, this would lead to 
an efficient implementation of the first part of the decoding. 
Improving the efficiency of the second part might be possible 
by taking into account the particular structure of these quantum 
polar codes. 

As a final point, we should note that the symmetric coherent 
information is equal to the quantum capacity of the quantum 
erasure channel, the quantum dephasing channel, and the 
universal cloning machine channel. This is not the case for 
the amplitude damping channel and the photon-detected jump 
channel, but the ratio between the true quantum capacity and 
the symmetric coherent information is close to one for these 
channels (see Figure [TJ. 



1.25 r 



1.2 - 



« 1.15- 



O 
03 

O 



1.05- 



Quantum Capacity Ratio 



Photon Jump Ratio 
■ Amplitude Damping Ratio 



0.4 0.6 

Channel parameter 



Fig. 1. The figure plots the ratio of the true quantum capacity to tlie 
symmetric coherent information as a function of the channel parameter for 
both the amplitude damping channel and the photon-detected jump channel 
(see Appendix [B] for definitions of these channels). Observe that the ratio is 
close to one for many values of the channel parameters. 



V. Conclusion 

We constructed polar codes for transmitting classical data 
privately over a quantum wiretap channel and for transmitting 
quantum data over a quantum channel. The rates achievable are 
respectively equal to the symmetric private information and the 
symmetric coherent information. In both settings, we require 
that the channel to the environment be effectively classical in 
order to guarantee that the rates are as claimed. The codes 
exploit the channel polarization phenomenon, first observed 
by Arikan in the classical setting |2| and later in Ref. 148 J for 
classical-quantum channels. 

Two of the most important problems going forward from 
here are to determine an efficient quantum decoder and to 
find other degradable channels outside of the class discussed 
here for which the symmetric quantum capacity is achievable. 
For this latter problem, one might need to consider an al- 
ternate inequality to that in (fTO|, in order to determine the 



■'bad channel polarization rate" a la Proposition |4] Such an 
alternate inequality should have the property that it pushes 
the process X„ closer to zero in some power in order to 
prove the needed convergence rates |21|. One could also try 
to determine whether the inequality in (10 1 might generally 



hold as n becomes larger. Numerical evidence indicates that 
the inequality in ( [T0| holds whenever the purity of the two 
input states is below a certain threshold. 

One might question whether we should call the codes 
developed here and in Ref. Il35l "quantum polar codes," if 
the criterion for a quantum polar code is that it be symmetric 
capacity-achieving, channel-adapted, and possessing efficient 
encoders and decoders. The codes constructed here are sym- 
metric capacity-achieving and channel-adapted, but do not 
have efficient decoders. The codes from Ref. |35| have ef- 
ficient encoders and decoders, but they are capacity-achieving 
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and channel-adapted only for Pauli channels. Solving the open 
problems posed here would certainly lead to quantum polar 
codes that possess all desiderata. 
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Appendix A 
Fidelity of pure state cq channels remains 
invariant under channel combining 

In the theorem below, we demonstrate that the fidelity for 
the "worse" channel |48 | is equal to the fidelity of the 
original channel W if the original channel is a classical- 
quantum state with pure state outputs. The implication is that 
the inequality in ( [T0| fails for this case. 

Theorem 9: Suppose we have two pure states |-0o) and 
such that the classical-quantum channel W outputs \ipo) if zero 
is input and if one is input. The fidelity between these 
two pure states is as follows: 

F(|Vo),|^i)) = |(V'o|V'i)l'. 

The states arising from channel combining in the worse 
direction W~ 1481 are as follows: 

Po =1 (l^o) {i>o\ ^ l^o) (^ol + l^i) (V-il <» IV'l) (^ll) , 

Pi (IV'o) (V-ol ® l^i) (^il + I^Ai) (V-il ® iV'o) (^ol) • 

Then the following relation holds 

F{W) ^F{W-) . 

Proof: Recall that the Uhlmann fidelity F [p^ , p^^ is 
equal to the maximum squared overlap between purifications 
of Pq and pj", where the maximum is over all purifications. 
Since both of the above states are rank two, it suffices to 
consider a two-dimensional purifying system for both. Fur- 
thermore, we can fix one purification while varying the other 
one. So, one purification of Pq is as follows: 



Po 



1 

71 



(IV'o)|V^o)|0) + |Vi)|V'i)|l)) 



and a varying purification of is as follows: 

l'/'p-> = ^(IV'o)|V'i)l'p) + IV'i)IV'o)|^^)), 



72 

where we can set 



1^) =a|0)+/3|l), 
|^^)=/3*|0)-a*|l) 



Our goal is to maximize the overlap ^ 

legitimate choices of a and /3. The overlap 
as follows: 

2 



over all 



Po '^Pi 



(Vol^o) (^ol^i) (0|¥') + (V'llV'o) m^i) {IW) + 
{Mi>i) (V'olV'o) (0|¥'^) + (^ilVi) (^ilV'o) 

(Vo|V'i)a + (^/'i|V^o)/3+ 
(Vo|V'i)r-(V'i|V'o)a* 



1 
4 
1 
4 

^|(V'o|V'i)(« + /3*) + (V'i|V'o) (/?-«*)!' 
^|(V'o|V'i)(« + /3*) + (V'i|^o) (/?-«*)!' 



= i K^ol^i)!' |a + ^ KVolV'i)!' 1/3 - a*!' 

+ i2Re{(Vi|V'o)'(a*+/3) (/?-«*)} 
= i|(^o|V^i)|'(|a + + 1/3 

+ i2Re{(Vi|V'o)'(/3' -(«*)')} 

= |l(^o|V'i)l'(l«l' + l/3|V 

2Re{a^*} + \a\^ + |^|^ - 2Re{a/3*}) 

+ ^2Re{(^i|Vo)'(/3'-(a*f)} 

= \ K^olV^i)!' + ^Re{(V'i|^o)' (/3^ - {a*f)} 

We set (^/'ilV'o) = r^pe^'^ (with = \{'ipi\Tpo)\) so that we 
have 



^Re{(^i|^o)'(/3^ 
- Re{r?e»2(9i+0) _^2g.2(e.+0)\ 



I' {rl cos (2 {0^ + 4>)) - rl cos (2 [O^ + 0))) 



< 2l(^i|V'o)rH + ri) 

By choosing an appropriate a and /3 such that 

cos (2 (6*1 + 0)) = 1 and cos (2 (6I2 + 0)) = -1, this 

demonstrates that the result holds for any pure states It/iq) 

and iV'i). ■ 

Appendix B 

Examples of channels with classical environment 

We prove in this section that several important degradable 
channels have a classical environment, in the sense that 
the classical-quantum channel induced by inputting classical 
orthonormal states at the input leads to commuting output 
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states. That is, we would like to prove that [po'jpf] = 
for several important channels, where 

p^ = W*i\x) {x\), 

W* is the complementary channel, and {\x)} is some or- 
thonormal basis. 

We begin with the amplitude damping channel. The com- 
plement of an amplitude damping channel with damping 
parameter 7 has the following action on a qubit input [47 1: 

1 - 7P ^77* 
VlV IP 

where < p, 7 < 1, 77 is a complex number such that the 
input matrix is positive, and the matrix representations are with 
respect to the computational basis {|0) , |1)}. (The complement 
is effectively an amplitude damping channel with damping 
parameter 1 — 7.) The result follows by observing that 

|0> (0|^|0) (0|, 

|1)(1|^(1-7)|0) (0|+7|1>(1|. 

Consider the photon-detected jump channel from Refs. fTj, 
II2O I. The authors of Ref. 1201 demonstrated that the comple- 
ment of this channel is as follows: 



1 — p rf 




T] p 





1-p 77 
77 p 



(1 



7P)|0) (0|^+7P|1)(1|''. 



So it is again clear that the computational basis suffices to 
make the environment outputs commute. 

The complement of an erasure channel with erasure param- 
eter e is just an erasure channel with erasure parameter 1 — e 

ma: 

p^ep+{l-e)\e) (e| , 

where |e) is some erasure symbol orthogonal to the space of 
p. Thus, any basis suffices to demonstrate that the states for 
the environment commute. 

A qubit dephasing channel with parameter p has the follow- 
ing form: 

p^ {l-p)p + p (J,pa.i, 

where ai is one of the Pauli operators. The complement of 
this channel has the following form for a pure state input j?/') 

ma: 



(1 



■p)|0) (0|- 



p) (^|a.|V')(|0)(l| + |l) (0|) 



P|1>(1| 



Thus, choosing the input basis to be the one for which ai acts 
as a "bit-flipping" operator leads to commuting outputs for 
the environment. For example, if cr^ = X, then the basis is 
{|0) , |1)}, while if a, = Z, the basis is {|+) , |-)}. 

Finally, the complement of the cloning channel is available 
in Ref. EOl . Due to the covariance of the cloning channel and 



its complement, inputting any orthonormal basis leads to the 
following states on the output: 



N-l 



1 



i=0 
Af-1 



A 



N 



(18) 



(19) 



where A'' is the number of clones, Ajv = A'' (A'' + 1) /2, 
and the states form an orthonormal basis. Thus, the 

environmental states commute for these channels. 
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